$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa File: af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa (raw, json) Hash identifier: cHoW2FPt8juqEdYvKYwM0nSsehT5Q3v3DqIEyYURHCk= Subject key identifier: 30:39:60:2E:40:28:D2:97:61:42:97:2A:A5:90:85:95:85:2A:A6:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47CFBBAB9B977FE9E374F9D0292BD25CD96C0FFF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa Signing time: Tue 17 Feb 2026 01:40:06 +0000 ROA not before: Tue 17 Feb 2026 01:40:06 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.161.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cf:bb:ab:9b:97:7f:e9:e3:74:f9:d0:29:2b:d2:5c:d9:6c:0f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:40:06 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=470f7cb629851f0a477423596f323ffad3919d7ac0d9339a2997143a9d7b3b39, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:95:21:75:7b:97:72:9e:b9:0a:bf:d1:bf: be:2e:d6:99:aa:80:39:16:c8:fc:7f:7a:7f:a5:9f: 91:bc:2e:de:60:46:8c:07:ea:85:18:a7:d9:0a:98: fd:d6:4e:1e:ab:d7:60:27:b6:fe:43:05:67:51:65: 93:b8:e9:74:f8:e1:d7:7d:f1:ab:ff:d7:08:cf:57: 5e:41:02:32:6d:af:56:af:66:41:93:41:7d:22:86: fd:45:e5:4c:18:2c:37:92:e0:39:1c:34:34:a5:dc: ff:b6:1f:f4:45:5e:7a:74:dc:23:fa:e2:56:ee:de: d6:cb:6a:31:78:77:a4:30:c9:50:84:5f:27:b7:d9: 95:4a:89:75:f1:bd:2a:32:00:75:27:d6:7a:ca:20: 79:31:e7:f7:41:43:cf:68:7d:b8:bb:23:3f:f5:aa: 6e:6a:03:42:d9:f5:66:36:80:20:cb:af:7d:b7:e4: ad:31:18:c4:05:dc:67:6c:82:10:d2:01:09:ef:e9: 67:c5:b4:d1:0a:e4:9e:ba:3d:31:99:7f:3b:65:12: d8:64:00:c8:c7:45:01:01:cf:c2:c9:40:e0:f4:77: fc:54:fb:15:8a:38:f8:c0:1b:af:41:e4:6d:42:61: b1:2f:e0:30:0b:b3:93:ad:55:4c:1d:bb:a4:04:45: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:39:60:2E:40:28:D2:97:61:42:97:2A:A5:90:85:95:85:2A:A6:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.161.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0f:b8:73:3c:2e:0c:8d:cc:48:94:76:58:af:a8:26:27:f3:4f: 38:1b:d6:81:b0:83:ff:35:41:a6:ce:10:5f:42:6a:15:30:47: 53:4d:ae:16:80:60:fc:d5:83:13:77:d7:15:2e:4f:ea:77:14: 77:b5:0b:5c:fd:64:cd:6d:51:55:c3:8c:45:b0:96:e6:8a:16: 4c:3d:e4:3c:e3:4c:c9:5d:b4:26:39:de:1e:40:51:78:65:64: 41:cd:fb:1f:f1:5e:9c:d0:ee:7a:14:c7:e6:6d:aa:0c:a5:95: 53:18:b9:7b:55:3f:b9:55:c1:4c:de:9e:42:69:64:2e:36:93: 2c:23:08:d4:df:86:1e:c8:12:63:59:8c:57:55:e6:cd:d0:ca: 36:0d:89:70:e1:67:72:0d:3c:46:2e:99:b5:63:e3:74:db:94: 3d:4c:e0:11:20:34:50:d9:26:c0:a7:6d:4b:3d:c3:5a:ff:96: c7:47:e2:5f:a9:5a:50:7a:04:fe:a3:06:55:19:3a:50:87:14: 6b:12:3d:32:80:25:d7:0b:d5:ee:ef:81:8c:d6:9d:e6:8e:fb: 4a:f2:ed:cd:2d:3c:80:bf:fe:0f:e7:c4:1c:ae:a7:8e:e2:e1: 9f:cc:7d:1e:f8:90:ff:83:ac:8a:04:0d:9d:15:c3:04:ee:22: 06:20:94:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR8+7q5uXf+njdPnQKSvSXNlsD/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDE0MDA2WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzBmN2NiNjI5ODUxZjBhNDc3NDIzNTk2ZjMyM2ZmYWQz OTE5ZDdhYzBkOTMzOWEyOTk3MTQzYTlkN2IzYjM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIFJUhdXuXcp65Cr/Rv74u1pmqgDkWyPx/en+ln5G8Lt5g RowH6oUYp9kKmP3WTh6r12Antv5DBWdRZZO46XT44dd98av/1wjPV15BAjJtr1av ZkGTQX0ihv1F5UwYLDeS4DkcNDSl3P+2H/RFXnp03CP64lbu3tbLajF4d6QwyVCE Xye32ZVKiXXxvSoyAHUn1nrKIHkx5/dBQ89ofbi7Iz/1qm5qA0LZ9WY2gCDLr323 5K0xGMQF3GdsghDSAQnv6WfFtNEK5J66PTGZfztlEthkAMjHRQEBz8LJQOD0d/xU +xWKOPjAG69B5G1CYbEv4DALs5OtVUwdu6QERa1TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMDlgLkAo0pdhQpcqpZCFlYUqpmIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmOGUzYjA5LWJmNTAtNDczYi05ZTNjLTZiM2MwM2ZmYzMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2oQAwDQYJKoZIhvcNAQELBQADggEBAA+4czwuDI3MSJR2WK+oJifzTzgb 1oGwg/81QabOEF9CahUwR1NNrhaAYPzVgxN31xUuT+p3FHe1C1z9ZM1tUVXDjEWw luaKFkw95DzjTMldtCY53h5AUXhlZEHN+x/xXpzQ7noUx+ZtqgyllVMYuXtVP7lV wUzenkJpZC42kywjCNTfhh7IEmNZjFdV5s3QyjYNiXDhZ3INPEYumbVj43TblD1M 4BEgNFDZJsCnbUs9w1r/lsdH4l+pWlB6BP6jBlUZOlCHFGsSPTKAJdcL1e7vgYzW neaO+0ry7c0tPIC//g/nxByup47i4Z/MfR74kP+DrIoEDZ0VwwTuIgYglKQ= -----END CERTIFICATE-----Generated at Mon Mar 2 01:25:24 2026 by rpki-client